Table of Contents
Introduction
We have several applications with user + password authentication. We want (must) provide a 2nd factor for every account that edits web content or with admin permissions. The goal was to include a php scipt with a single line to enable MFA.
This web projects has 2 modes:
- Admin web ui: here you can add an application with name and url. You get an application id and a secret that you need to put to the web application
- Frontend for incoming users from applications: any user of a known application can
- setup its enabled mfa methods
- solve mfa challenges
Plan
How does it work?